From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oi1-f173.google.com (mail-oi1-f173.google.com [209.85.167.173]) by mx.groups.io with SMTP id smtpd.web12.10465.1628177692864336198 for ; Thu, 05 Aug 2021 08:34:53 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20150623.gappssmtp.com header.s=20150623 header.b=tMH9PaN3; spf=softfail (domain: sakoman.com, ip: 209.85.167.173, mailfrom: steve@sakoman.com) Received: by mail-oi1-f173.google.com with SMTP id t128so7900227oig.1 for ; Thu, 05 Aug 2021 08:34:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=bLb2OBh4LIZN9PpbGrYBgfyVqQwrixdMYx9b2b7peck=; b=tMH9PaN3zf+4Zjd95BhL2IOj+E3LcJkZ4MNKuvzyMzjvOKy5vAxRPiJSSzbKCmRFVt LBgz//1bcGrm8F+ZgKGrhX1wGpHoC+FXU0qa7+/Xq4/bG9Hosk6LlnxvlCG3Rpc1B6bv iEXZndYjSSpv7vpUOpD9r27VcGFZkU5fCO6xCdDfXU1nBv1FwovKVxaKzJohmW426JwX N7NrIaCIVzB/ZvJujvPW4tdPSdKFh1Qvxs682UTAGIeifHHBCqLkwrfnblQSpY+gQzg4 l+P1X+z4KKysTbLxmwF+L/UZj7JZhXsE+XEoBGCkkTMdU39QQJzitDCXjR9YJnSBX69y TKwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=bLb2OBh4LIZN9PpbGrYBgfyVqQwrixdMYx9b2b7peck=; b=EvQPvC0AOU674zvXXZujUGc2EflqkVr1CFd55F0rkS0faaOO/a+80eh7GaKoMj6SOz SGuE5+ZQTigkBss3axX7UDw+pIdxM9rzEM2K6aGqJgGsujLoGJGjef2SozfDmPGJ3j4Q byqHhzrsMp1NipxF2TUlhXKjrlS3WrRsJN5ZIjZEtgWr1lMeGIE/D033kTXWgTvrOhrV Is5QpRe/+0dVFtzP6zhputZLugnV5LrGfldVxSFjluzC/j/Rpsb3seLfmCvHfSqo6rX6 GQmK89yAgWg0i+lUWww7Zf3joDwQyP/GA6qxmr2drFIuZi5hyijfpt5J7Dy2Git5be8p v8JA== X-Gm-Message-State: AOAM5312GHxWKZAErQqJlz1TlhrLW/TgM7Z6Rsl8r00g+PCs9AvhsWn3 SVlmvN2ai75IlOkd6NplCE6cxxIURs1kHbJ9 X-Google-Smtp-Source: ABdhPJzQd8DtzwxNR2PjYk5jxgxOY5+GDbM2zLbLrWh29N98vzb8gHPYUIAH7PfjkDAbnFdO3XLXig== X-Received: by 2002:aca:d15:: with SMTP id 21mr4060430oin.94.1628177691555; Thu, 05 Aug 2021 08:34:51 -0700 (PDT) Return-Path: Received: from hexa.router0800d9.com ([172.243.4.16]) by smtp.gmail.com with ESMTPSA id bf41sm1103076oib.41.2021.08.05.08.34.47 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 05 Aug 2021 08:34:51 -0700 (PDT) From: "Steve Sakoman" To: openembedded-core@lists.openembedded.org Subject: [OE-core][dunfell 00/33] Patch review Date: Thu, 5 Aug 2021 05:33:37 -1000 Message-Id: X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Please review this next set of patches for dunfell and have comments back by end of day Monday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2417 with the exception of an intermittent issue on qemumips which passed on subsequent re-test: https://autobuilder.yoctoproject.org/typhoon/#/builders/60/builds/3776 The following changes since commit 9ae339ace9274be71bfd3b5e5da64dceac9fa963: kernel-devsrc: fix 32bit ARM devsrc builds (2021-07-20 06:36:58 -1000) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut Armin Kuster (1): qemu: Enable seccomp if FEATURE is set Bruce Ashfield (2): linux-yocto/5.4: update to v5.4.134 linux-yocto/5.4: update to v5.4.135 Changqing Li (1): archiver.bbclass: fix do_ar_configured failure for kernel Khem Raj (1): ovmf: Fix VLA warnings with GCC 11 Michael Opdenacker (1): oe-setup-builddir: update YP docs and OE URLs Mike Crowe (1): curl: Fix CVE-2021-22924 and CVE-2021-22925 Nathan Rossi (1): qemu.inc: Add seccomp PACKAGECONFIG option Neetika Singh (1): curl: Fix for CVE-2021-22898 Nicolas Dechesne (4): yocto-check-layer: improve missed dependencies checklayer: new function get_layer_dependencies() checklayer: rename _find_layer_depends yocto-check-layer: ensure that all layer dependencies are tested too Oleksandr Kravchuk (1): bitbake.conf: change GNOME_MIRROR to new one Ralph Siemsen (1): oeqa/manual/toaster: fix small typo Richard Purdie (2): yocto-check-layer: Remove duplicated code sstate: Fix rebuilds when changing layer config Ross Burton (1): glew: fix Makefile race Steve Sakoman (5): Revert "gstreamer-plugins-good: ignore CVE-2021-3497/8 since they are fixed" Revert "gstreamer-plugins-base: ignore CVE-2021-3522 since it is fixed" gstreamer: ignore CVE-2021-3497, CVE-2021-3498, and CVE-2021-3522 libxml2: fix CVE-2021-3541 avahi: fix CVE-2021-3468 Teoh Jay Shen (5): oeqa/ethernet_ip_connman : add test for network connections oeqa/runtime : add test for RTC(Real Time Clock) oeqa/suspend : add test for suspend state oeqa/terminal : improve the test case oeqa/usb_hid.py : add test to check the usb/human interface device status after suspend state TeohJayShen (1): oeqa/runtime: add test for matchbox-terminal Ulrich Ölmann (1): initramfs-framework/setup-live: fix shebang Wes Lindauer (1): oeqa/runtime/cases: Only disable/enable for current boot Yi Zhao (1): ifupdown: added -1 option to dhclient for dhcpv6 leimaohui (1): archiver.bbclass: Fix patch error for recipes that inherit dos2unix. meta/classes/archiver.bbclass | 8 +- meta/classes/sstate.bbclass | 1 + meta/conf/bitbake.conf | 2 +- .../lib/oeqa/manual/toaster-managed-mode.json | 2 +- meta/lib/oeqa/runtime/cases/date.py | 4 +- .../oeqa/runtime/cases/ethernet_ip_connman.py | 36 +++ meta/lib/oeqa/runtime/cases/rtc.py | 38 +++ meta/lib/oeqa/runtime/cases/suspend.py | 33 +++ meta/lib/oeqa/runtime/cases/terminal.py | 21 ++ meta/lib/oeqa/runtime/cases/usb_hid.py | 22 ++ meta/recipes-connectivity/avahi/avahi.inc | 1 + .../avahi/files/CVE-2021-3468.patch | 42 ++++ ...-1-option-to-dhclient-on-upping-an-i.patch | 65 +++++ meta/recipes-core/ifupdown/ifupdown_0.8.35.bb | 1 + .../initramfs-framework/setup-live | 2 +- .../libxml/libxml2/CVE-2021-3541.patch | 73 ++++++ meta/recipes-core/libxml/libxml2_2.9.10.bb | 1 + .../ovmf/0001-Fix-VLA-parameter-warning.patch | 51 ++++ meta/recipes-core/ovmf/ovmf_git.bb | 3 +- meta/recipes-devtools/qemu/qemu.inc | 1 + meta/recipes-devtools/qemu/qemu_4.2.0.bb | 1 + .../0001-Fix-build-race-in-Makefile.patch | 56 +++++ meta/recipes-graphics/glew/glew_2.2.0.bb | 1 + .../linux/linux-yocto-rt_5.4.bb | 6 +- .../linux/linux-yocto-tiny_5.4.bb | 8 +- meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 +- .../gstreamer1.0-plugins-base_1.16.3.bb | 4 - .../gstreamer1.0-plugins-good_1.16.3.bb | 5 - .../gstreamer/gstreamer1.0_1.16.3.bb | 9 + .../curl/curl/CVE-2021-22898.patch | 26 ++ .../curl/curl/CVE-2021-22924.patch | 226 ++++++++++++++++++ .../curl/curl/CVE-2021-22925.patch | 43 ++++ meta/recipes-support/curl/curl_7.69.1.bb | 4 + scripts/lib/checklayer/__init__.py | 11 +- scripts/oe-setup-builddir | 4 +- scripts/yocto-check-layer | 25 +- 36 files changed, 813 insertions(+), 45 deletions(-) create mode 100644 meta/lib/oeqa/runtime/cases/ethernet_ip_connman.py create mode 100644 meta/lib/oeqa/runtime/cases/rtc.py create mode 100644 meta/lib/oeqa/runtime/cases/suspend.py create mode 100644 meta/lib/oeqa/runtime/cases/terminal.py create mode 100644 meta/lib/oeqa/runtime/cases/usb_hid.py create mode 100644 meta/recipes-connectivity/avahi/files/CVE-2021-3468.patch create mode 100644 meta/recipes-core/ifupdown/files/0001-inet6.defn-Added-1-option-to-dhclient-on-upping-an-i.patch create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2021-3541.patch create mode 100644 meta/recipes-core/ovmf/ovmf/0001-Fix-VLA-parameter-warning.patch create mode 100644 meta/recipes-graphics/glew/glew/0001-Fix-build-race-in-Makefile.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2021-22898.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2021-22924.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2021-22925.patch -- 2.25.1